Skip to content
Threat Feed
Subscribe

Tag

Webhook-Bypass

1 brief RSS
high advisory

PraisonAI web_crawl Tool Vulnerable to DNS Rebinding SSRF (CVE-2026-61430)

PraisonAI versions prior to 1.6.78 are vulnerable to server-side request forgery (SSRF) within its web_crawl tool, allowing attackers to bypass hostname validation using DNS rebinding and retrieve sensitive internal HTTP response bodies from private or loopback services.

PraisonAI +1 ssrf dns-rebinding vulnerability web-application code-injection remote-code-execution python cve +4
1r 3t 1c